YOSHIFUJI Hideaki 85040bcb46 [IPV6] ADDRLABEL: Fix double free on label deletion. ...

If an entry is being deleted because it has only one reference, 
we immediately delete it and blindly register the rcu handler for it,
This results in oops by double freeing that object.

This patch fixes it by consolidating the code paths for the deletion;
let its rcu handler delete the object if it has no more reference.

Bug was found by Mitsuru Chinen <mitch@linux.vnet.ibm.com>

Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Signed-off-by: David S. Miller <davem@davemloft.net>

2008-01-28 15:46:02 -08:00

..

netfilter

[NETNS][FRAGS]: Make the LRU list per namespace.

2008-01-28 15:10:39 -08:00

addrconf_core.c

[IPV6]: ipv6_addr_type() doesn't know about RFC4193 addresses.

2007-07-31 02:28:21 -07:00

addrconf.c

[IPV6] ADDRCONF: Sparse: Make inet6_dump_addr() code paths more straight-forward.

2008-01-28 15:10:28 -08:00

addrlabel.c

[IPV6] ADDRLABEL: Fix double free on label deletion.

2008-01-28 15:46:02 -08:00

af_inet6.c

[NETNS][FRAGS]: Move ctl tables around.

2008-01-28 15:10:34 -08:00

ah6.c

[IPSEC]: Move all calls to xfrm_audit_state_icvfail to xfrm_input

2008-01-28 15:00:10 -08:00

anycast.c

[NETNS][IPV6]: inet6_addr - check ipv6 address per namespace

2008-01-28 15:01:44 -08:00

datagram.c

[NETNS][IPV6]: inet6_addr - check ipv6 address per namespace

2008-01-28 15:01:44 -08:00

esp6.c

[IPSEC]: Move all calls to xfrm_audit_state_icvfail to xfrm_input

2008-01-28 15:00:10 -08:00

exthdrs_core.c

[NET] IPV6: Fix whitespace errors.

2007-02-10 23:19:42 -08:00

exthdrs.c

[NETNS][IPV6]: inet6_addr - make ipv6_chk_home_addr namespace aware

2008-01-28 15:01:46 -08:00

fib6_rules.c

[NETNS]: FIB rules API cleanup.

2008-01-28 15:08:13 -08:00

icmp.c

[NETNS][IPV6]: inet6_addr - check ipv6 address per namespace

2008-01-28 15:01:44 -08:00

inet6_connection_sock.c

[IPV6] __inet6_csk_dst_store(): fix check-after-use

2007-10-15 12:26:32 -07:00

inet6_hashtables.c

[NET]: prot_inuse cleanups and optimizations

2008-01-28 15:00:36 -08:00

ip6_fib.c

[NETNS]: Add netns to nl_info structure.

2008-01-28 15:01:29 -08:00

ip6_flowlabel.c

[NET]: Add some acquires/releases sparse annotations.

2008-01-28 15:00:31 -08:00

ip6_input.c

[IPv6] RAW: Compact the API for the kernel

2008-01-28 14:54:29 -08:00

ip6_output.c

[NETNS][IPV6]: inet6_addr - ipv6_get_ifaddr namespace aware

2008-01-28 15:01:45 -08:00

ip6_tunnel.c

[NETNS]: Add namespace parameter to ip_route_output_key.

2008-01-28 15:11:07 -08:00

ipcomp6.c

[IPSEC]: Forbid BEET + ipcomp for now

2008-01-28 14:53:43 -08:00

ipv6_sockglue.c

[NET]: prot_inuse cleanups and optimizations

2008-01-28 15:00:36 -08:00

Kconfig

[IPV6] MIP6: Loadable module support for MIPv6.

2007-07-10 22:15:42 -07:00

Makefile

[IPV6]: Make the ipv6/sysctl_net_ipv6.c compilation cleaner

2008-01-28 14:56:29 -08:00

mcast.c

[NET]: Add some acquires/releases sparse annotations.

2008-01-28 15:00:31 -08:00

mip6.c

[IPSEC]: Move state lock into x->type->input

2008-01-28 14:53:52 -08:00

ndisc.c

[IPV6] NDISC: Sparse: Use different variable name for local use.

2008-01-28 15:10:28 -08:00

netfilter.c

[NETFILTER]: constify nf_afinfo

2008-01-28 14:59:05 -08:00

proc.c

[NETNS][FRAGS]: Make the mem counter per-namespace.

2008-01-28 15:10:36 -08:00

protocol.c

[IPV6]: Decentralize EXPORT_SYMBOLs.

2007-04-25 22:23:36 -07:00

raw.c

[NETNS][RAW]: Create the /proc/net/raw(6) in each namespace.

2008-01-28 15:02:07 -08:00

reassembly.c

[NETNS][FRAGS]: Make the pernet subsystem for fragments.

2008-01-28 15:10:40 -08:00

route.c

[NETNS][DST] dst: pass the dst_ops as parameter to the gc functions

2008-01-28 15:02:46 -08:00

sit.c

[NETNS]: Add namespace parameter to ip_route_output_key.

2008-01-28 15:11:07 -08:00

sysctl_net_ipv6.c

[NETNS][FRAGS]: Move ctl tables around.

2008-01-28 15:10:34 -08:00

tcp_ipv6.c

[TCP]: Convert several length variable to unsigned.

2008-01-28 14:59:56 -08:00

tunnel6.c

[IPV6]: Replace sk_buff ** with sk_buff * in input handlers

2007-10-15 12:50:28 -07:00

udp_impl.h

[IPV6] UDPLITE: Sparse: Declare non-static symbols in header.

2008-01-28 15:10:26 -08:00

udp.c

[IPV6] UDP,UDPLITE: Sparse: {__udp6_lib,udp,udplite}_err() are of void.

2008-01-28 15:10:25 -08:00

udplite.c

[IPV6] UDP,UDPLITE: Sparse: {__udp6_lib,udp,udplite}_err() are of void.

2008-01-28 15:10:25 -08:00

xfrm6_input.c

[IPSEC]: Fix transport-mode async resume on intput without netfilter

2008-01-28 15:00:10 -08:00

xfrm6_mode_beet.c

[IPSEC]: Separate inner/outer mode processing on input

2008-01-28 14:53:46 -08:00

xfrm6_mode_ro.c

[IPSEC]: Make x->lastused an unsigned long

2008-01-28 14:53:52 -08:00

xfrm6_mode_transport.c

[IPSEC]: Use IPv6 calling convention as the convention for x->mode->output

2007-10-10 16:55:54 -07:00

xfrm6_mode_tunnel.c

[IPSEC]: Rename tunnel-mode functions to avoid collisions with tunnels

2008-01-28 14:59:18 -08:00

xfrm6_output.c

[NETFILTER]: Introduce NF_INET_ hook values

2008-01-28 14:53:55 -08:00

xfrm6_policy.c

[NETNS][DST] dst: pass the dst_ops as parameter to the gc functions

2008-01-28 15:02:46 -08:00

xfrm6_state.c

[IPV6]: Make xfrm6_init to return an error code.

2008-01-28 14:56:45 -08:00

xfrm6_tunnel.c

[IPSEC]: Get nexthdr from caller in xfrm6_rcv_spi

2007-10-17 21:29:25 -07:00